Lucene search
+L

15328 matches found

Microsoft KB
Microsoft KB
•added 2025/01/01 12:00 a.m.•20 views

KB3137746 - Cumulative update package 2 for SQL Server 2012 SP3

KB3137746 - Cumulative update package 2 for SQL Server 2012 SP3 Applies To SQL Server 2012 Analysis Services SQL Server 2012 Business Intelligence SQL Server 2012 Developer SQL Server 2012 Enterprise SQL Server 2012 Enterprise Core SQL Server 2012 Express SQL Server 2012 for Embedded Systems SQL...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2025/01/01 12:00 a.m.•23 views

KB3137745 - Cumulative update package 11 for SQL Server 2012 SP2

KB3137745 - Cumulative update package 11 for SQL Server 2012 SP2 Applies To SQL Server 2012 Analysis Services SQL Server 2012 Business Intelligence SQL Server 2012 Developer SQL Server 2012 Enterprise SQL Server 2012 Enterprise Core SQL Server 2012 Express SQL Server 2012 for Embedded Systems SQL...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2025/01/01 12:00 a.m.•31 views

KB2833645 - Cumulative update package 4 for SQL Server 2012 SP1

KB2833645 - Cumulative update package 4 for SQL Server 2012 SP1 Applies To SQL Server 2012 Developer SQL Server 2012 Enterprise SQL Server 2012 Standard SQL Server 2012 Analysis Services SQL Server 2012 Business Intelligence SQL Server 2012 Express This article describes cumulative update package...

5.9AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2025/01/01 12:00 a.m.•15 views

KB3130926 - Cumulative Update 5 for SQL Server 2014 Service Pack 1

KB3130926 - Cumulative Update 5 for SQL Server 2014 Service Pack 1 Applies To SQL Server 2014 Developer SQL Server 2014 Enterprise SQL Server 2014 Express SQL Server 2014 Standard SQL Server 2014 Web SQL Server 2014 Business Intelligence This article describes cumulative update package 5 Build...

6AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2025/01/01 12:00 a.m.•49 views

KB3120313 - Cumulative update package 10 for SQL Server 2012 SP2

KB3120313 - Cumulative update package 10 for SQL Server 2012 SP2 Applies To SQL Server 2012 Analysis Services SQL Server 2012 Business Intelligence SQL Server 2012 Developer SQL Server 2012 Enterprise SQL Server 2012 Enterprise Core SQL Server 2012 Express SQL Server 2012 Standard SQL Server 2012...

6.1AI score
SaveExploits0
NVD
NVD
•added 2024/12/31 3:15 a.m.•30 views

CVE-2024-45497

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

7.6CVSS0.00576EPSS
SaveExploits0References10
attackerkb
attackerkb
•added 2024/12/31 3:15 a.m.•28 views

CVE-2024-45497

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

7.6CVSS7AI score0.00576EPSS
SaveExploits0References11Affected Software9
Prion
Prion
•added 2024/12/31 3:15 a.m.•33 views

CVE-2024-45497

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

7.6CVSS0.00576EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/12/31 2:19 a.m.•67 views

CVE-2024-45497 Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

7.6CVSS0.00576EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2024/12/31 2:19 a.m.•23 views

CVE-2024-45497 Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

7.6CVSS6.9AI score0.00576EPSS
SaveExploits0References10
CVE
CVE
•added 2024/12/31 2:19 a.m.•189 views

CVE-2024-45497

The CVE-2024-45497 entry describes a flaw in the OpenShift build process where a docker-build container mounts the node’s /var/lib/kubelet/config.json via a hostPath volume into the build pod. The config.json contains credentials for pulling private images, and the mount is not read-only, enablin...

7.6CVSS6.9AI score0.00576EPSS
SaveExploits0References10
Mend
Mend
•added 2024/12/31 2:19 a.m.•11 views

CVE-2024-45497

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

7.6CVSS6.9AI score0.00576EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•7 views

CVE-2024-45497: Incorrect Permission Assignment for Critical Resource

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

7.6CVSS7AI score0.00576EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2024/12/30 10:26 p.m.•4 views

Withdrawn Advisory: Malware in @swiggy-private/aatm-nirbhar-build

Withdrawn Advisory This advisory has been withdrawn because @swiggy-private/aatm-nirbhar-build is not malware. This link is maintained to preserve external references. Original Description Any computer that has this package installed or running should be considered fully compromised. All secrets...

5.8AI score
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/12/30 12:00 a.m.•12 views

Fedora 41 : iwd / libell (2024-256818da09)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-256818da09 advisory. iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if...

7.4CVSS6.7AI score0.00716EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2024/12/27 3:15 p.m.•22 views

UBUNTU-CVE-2024-56617

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit 5944ce092b97 "archtopology: Build cacheinfo from primary CPU" adds functionality that architectures can use to optionally allocate and build...

5.5CVSS6AI score0.00206EPSS
SaveExploits0References11
osv_oesa
osv_oesa
•added 2024/12/27 11:08 a.m.•25 views

OESA-2024-2587 golang security update

. Security Fixes: Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.CVE-2024-34155 Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a...

7.5CVSS6.5AI score0.01127EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/12/27 7:23 a.m.•6 views

Malware in lfs-au-website-build

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2024/12/25 12:00 a.m.•28 views

JetBrains TeamCity Code Issue Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A code issue vulnerability exists in JetBrains...

7.1CVSS6.1AI score0.0024EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/12/25 12:00 a.m.•27 views

JetBrains TeamCity Improper Access Control Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an improper access...

5.3CVSS5.9AI score0.00286EPSS
SaveExploits0References1
Rows per page
Query Builder